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(57) Abstract: An information provider encrypts a content by a first -encryption key so as to generate an encrypted content and 
encrypts a first decryption key corresponding to the first encryption key by a second encryption key so as to generate encrypted key 
information. The information provider provides the encrypted content and the encrypted key information in the form of a recording 
medium or the like to an information receiver. Moreover, the information provider has information for generating a second decryption 
key corresponding to the second encryption key in advance, uses it to acquire the first decryption key, and furthermore can decrypt 
and reproduce the content by using the first decryption key. The first decryption key and the second decryption key are distributed 
to the information receiver according to a key management method utilizing a tree structure in which an information receiver is 
allocated to a leaf. Here, the tree structure is divided into a plurality of hierarchies so as to define a plurality of partial trees and key 
information is allocated on the partial tree basis, thereby reducing the information amount of the key information to be held by the 
information receiver. 
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(4)ST h ( R_) hJU^<0^ — K*<#^^--i)ii^. -hfB (1) 1= M -5 . ST h 



»»^rom^-cfc-So n_\ ( n_\ R_&mtfii-z>&#M'&<D%i) o±m 



& £ o 



7=1 



(3-1) 



log 4 (N)-l 

log 4 (A0 

log 4 (iV/4') 

log 4 (^/4')-l 

log 4 (iV/4') 

-1 



0=1) 
0 = 2) 

(2-4" 1 < y<4') 

(4'' <y <2-4' £>0 j tJS-S^) 

(4'' <y<2-4' >5>0 y ££0H0O 



\ \Z 0<i<log 4 N $}1§fc-rg^"efc'5>o 

d.3.3) ssa-m^s.,* • • • . s^^omom y ^-c^>s 
d.3.4) gfcfg#^<Di&ffi« mam y ^-c^j* 



« it ffi (£111126) 
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it JS IK CRW26) 
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v, it. v i Hr-r-6«#*T ll . l © "J -7 l=«J l J ^ T 6 *ifc Sit 

io (y- Kv, *<ffl»*T h ©y--7icffis-r***i*. §fi#<cm^5HJ 

y St^i&lJi^^fcfti^ LTL^lio ) o SI^^T,,., <£>;a££k. ( 1 ^ k ^ 
d) fc-TSfc* SP#*T h ., *<Dy — h*t% ^o/U±lc#SL4H\y-K Vj f^ 
- h t-t&U#*T KS I* { (2 k+1 -1) - (k + 1) } <@#^-r-i>o c*tj:y# 

s»^*T h ,,i=o^r. ^^s_j(Diai* { (2 k+, -D - (k + i) } mx-foZo j= 

15 oti^S^S,., (DlSliit (3-2) <D ck 5 Jjf -5 o Sil#uli5t (3-2) IZTT.-ttz 
l+©ffl»©«£«*LTfcfrfcl+ikl**&fcl.*. (3-2) iCfc^T 1 ^S^^lt 



x , log, g ^ (2t+ , fc 2) _ 4(2" - 1) log, N (d + 5) bg 2 N + | (3 _ 2) 

d.3.2) flj^jii^s.,, • ■ s.'Ncaroayat^s (jmaa»±fift»* 
20 m* 

Ltfe < it $ M 6 fc #> . The Subset Difference Method <t|s]4i 

y. ftft^jR^Sj.j i=a»ai*siy s-csa-eiifc < , su#*T h ., © u-^ichj 
25 ^s^s_,.j ( v j, Sjcs,) i=«yar*«L w^a^Sjicnyitati 
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G : { O , 1 } " — » {0. 1 } 3n ^Afc^CD 3 feto&t! * iH A* * S<61SL 
5 # LfcSffi'JSPtt* G L (S) G B (S) , * * SB # £ G B (S) 

3iS£$l*T*M#£ K9I-C # * <fc l^fctttSG li ;1S tz Lt^^ Itfttf & £ ft 
10 y — K v , — h it -5) MacroLayer(s) ^GJSfl^* T h . , £#X.<5„ JU— I- ^ — 

k v , ir 7^<;u label, $ty y t*s-cs (ffimotcto&MiD&ttKto y -?\zm y ^-c 
;u£iijy arstisti. o£ y ±fe^3Ei*;*© £ 5i=£<5 . rg]j#*T h ., * 

<D'J — 7lC#jy ^"C e>*vfcSfs#<DS^^., IC^^iU LABEL, £flj y St5, J ) . 
15 LABEL, tJ S&#*T h ., *<D^ — K v } <D * JV f? & (I] U S t b^l^7^UA ? 

$SLtu^o label,, j I* v j £;u- h <h "5SU#*CD 'J— y ^ 

ft-c ft JUS 8. ltJ l=» LTfiJ y at e>ft£o ) . label,, j 

20 jy«»**s.,.j icffl y bti^^t-feS, label,. j *W»*T h ., <a;u— h 

ic «fc y * < , 

25 <7>fijy ^-ct,tif=y- Kicffly a rant-* (M) sio zosmttjafflicfttitf » 
— Kro^^^nis g u (s) . g r (s) *<*iysT6tLS. -ftcfcy. v,^e> v 

ICflJ y btLfc^^^ LABEL, 7^<=>, SP^-^Th., *<Dy — K v,©^^^ LABEL,, j 
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£3fctf>£> C 1 tfT*£ ZoMik^ LABEL,.j$G<DA*t L fc t $ <D & ± CD + G 
„ (LABEL,. «^S J . J l=«yit««t (M) iL u iL-CfflUS. HI 

e , izffly at*iL u (Dfluar«s*t. 

*«blc, y — K vj (D±XO) : ¥-ms — K©7^ (t=f=L, v j g^O^JU 

- h©7^^ LABEL, ZJ^mhtltckZ. i»»*8 u i:«yaT6*.*t* (« 
io *) ■L liJ «tt|:t4»l:I*a**WQt**^^ B* l **« 

b-f -V + IC 1 Of u<DM"rSat#*T h IZOI^T**.*. »#*T h CD 

, u _ h t u y ^-c 'J — 7£«#/<x±tf> d ( y — ^BP^-coy — Kli 

15 ttxTl^fcl*. ) (D/-K$v,tL, v , £;U — h £ k % (1^k^d)CD 

S&#*T h ,, <J)J — KCD + "C. /^UHSSe^fcTM-S /-Plv„, v l2% • • • v 

L. 4»0 u ODffetl^ — K-CStlW — h't'fcS. S|S^-*T h .i +0>y — K-C, u CDft 
^fiTr^fL^fi^coy — K vjli» Zti^cD^ — K v v l2> • ■ • v ^<r>^-?M^<T> 
20 =?-US — KT'fc&o #>X|-. Slt%u*« I u t LT, v v l2 . • ■ • . v lk 

yax&Hfc^^^^fiiflLTteittf, ^* d+i ia«ftiaa***G*ffl^T. 

S^l%u £-£t?gfl#*T h C0&(*.^"? P b-f "VttlC * LI** 6 I og 2 N/d T? fc l J . 

coSs#*T h ., + icft«#u#fc*L£it*ii*fc&fci^'<;i'M:k1l**rt v &* z 

*l£ u £ -a T h ., |COI\T#pL-5 t, Sff u Lt £ ft* ft It ft 12 

3S-e><f^a#fii (7^)U) COfSlixt (3-3) CD «fc 7 I" ft & „ 
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iQSa^ A , _ (d + l)log a AT , 

4=1 ^ 

xt (3-3) l=fcl^T 1 ttT USOH*. St (3-2) £ |§U§I= mtoit-t z> Sit^t 

(1.3.7) «»©2#*£flil*S3frSs 

* &i=a«#u <5»8«« 1 e2H*«Ma>sfc<z> k 

10 US »fl|**y— -71=11 UJ!ST&*1*: 2 Layer(b) 

-i>y- KS^-hit*2»fi(D2#*i:#ilL, ^SJ**if=2^*lr*tLt« 
jt^Jiffl-r^o C(Z)i:#v Layer(O) ~ Layer (b-1) IC^S^i) y — Kttttfil L & 
l\ Q Z*tl=*y. 56«#3W«*LTfe<1ta« I (3-4) . 3* (3-5) ©J:? 

15 ft ^ (3-4) T?fcy* Mflm£fe±J&3££^<i>ii-&0> : £-HA«S; (3-5) T»fc£ 0 

(3-4) „ st 0-5) i=fc^x^i= 1 A<£S*iTi*&a>i*, s*a>«y s-c&ax 



log,*-* £ (2 * + « _ fc _ 2) = 4(2^-l)(log 2 iV-6) _ (d + 5)(log 8 *r-b) + x (3-4) 



1 + 

a 



i+ lo 62 iV-i> ^ fc= (d + l)(log 2 N-b) +i (35) 



Jb=i 



<t it d=2rot*^#^5t, LfcL^a«#a*< I r_I = r ©<t^5C o-e) 
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r 



(3-6) 



log 4 (AT/4*)-l 

log 4 (^/4 4 ) 

log 4 (^/4* +i ) 



(0 < j < 2 -4* A»0 y ) 
(0 < y S 2 • 4* d^O y ) 
(2 -4* + '-' < y'<4* +i ) 



log 4 (W/4 6+ ')-l 
log 4 (iV/4 6+i ) 



-1 



(4 i+, '.< y<2-4> + ' j#1Hk) 
(4* +i < y < 2 -4* + ' 7l>o j &mWc ) 
(2 -4 ioi ' N -' < j<4 lot ' N = N) 



ZCt i I* 0<i<log 4 (N/4 h ) &ffitz-?mWLT*&Z>o 
(1.4) ##a<Dttt&ti:ifc 
5 H8C:£<B$ttg![ IN.K *aMbLfcl*S«*ft I R. I = r Lfci 

"To @8|C*tJ:5i:s N_= 2 30 =1, 073, 741. 824= 1 0|, r = 2 M = 1 6. 384 t 
L. ^^^-effll^Bt-^-fbT-lUa* U XA(DMM:IZ±X 128b it k Ltz 0 

d (75 2 IC gfl Ltlil^lfc^atL^^, 

i*<D^#^ (The Subset Difference Method, The Layer Division Subset Difference 

Method X'mm%Li&£.f£3s&&m? zm-si* 1 ? * Jisfitn) &mi*x % mmttitz^ 
is w«*a-%-r*©^s*s-r*^siMfc*. tox&t lti*. 

±x<Dm^mx'±x(D^y s m#ic^ffl^--<^m#^i 

j£fc£*##x.£*t5o z<z>i§#£j££*t£t?!#Bl*£ b lc-f ^9^0 xtf m^mna 

20 The Subset Difference Method l*± gjit;- 19 £ (AtSt) 7"0^ h^tltl^ 

tf.Ztllt.mWt b * — $ £ LTU -i)f=ttt?fc.5.o3Ea)^A N e>h =18,17. •■• . 

i s o t&o-c&y. — #*«ifl>jiSA«2^** i o©^ffl^fc*scic*ia-r*. * 



* *. JB « 0WJ26) 
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New Method t $ ft fc 3& i£ II fiSJ&SiC J; -S^S (The Layer Division 

Subset Difference Method) V U , Cftli. M#Jfl^<D 7 * JKDtfl y £ T K 

5 %m^t-J5&.lt* New Method using PRNG t %frfrtz.?5 3CC fc -6 „ 

ft ^ ft 4g «;> h£ft-tl^<Dii, ^gfed^Av-* — £ £: LT^S 
fc#>T-. 3E^?, d=K 2. • • • a>£-&$&LTU«. d =1 (D £ £ l*MfeiSL3&£ fi£ 

5 ;t I* -£<*>) ffitgf*|B]± L.£l^ The Subset Difference Method 

"Cl>£l^* d=U b=0 (Dif-ns 7->U=f U The Complete Subtree Method <t 

ilCt^o d=16, b=14 The Subset Difference Method <Db=14 

15 £ L 7= Affile (B8f2O©SS0)^lA<I4i:ot^.5^) . The Tree 

Pattern Division Method dOl^TIi, T ^ 'J X A ic^fflf £ * £ 2 

< fit© n fl>*£JBl**. *<Dtz$>. m 8 icli, £^t>teffl-f 2#*, 
3#*. 4#*, 5#*£: Lfc»£r<&«JII£Si*l.Tl*«o n#*<D'J — 
#SfiyarSf=A. 2#*. 4#*£JBl\£i§^£|&^T. S1i#^S(l* 2 30 = 
20 4 ,5 =1,073,741,824 fC&^&U. £oT. 3#*. 5^^l-"^t x TliJ«lTQ>fiE^ffl 

• 3#* : N = 3 ,9 =1, 162, 261,467= 1 

• 5 ft* : N = 5 ,3 =1. 220, 703. 125= 1 OB 

*f=. Zftj^Dt^ The Complete Subtree Method £ T 3 'J X AA^ £ Id mm 

25 -Cfc5o 

(1.5) S«5^ffl«>3 >-T>'yiB«S/XT-A 

»ffi-ei*s-iBlijflltf*9 I*, IPIxliDVD-ROMftiflDjfef'f^f StCftlffl 
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!EiiJ&&9 I=1B«"T*. £fc, ««ffi«*7l*. *3&fl:©»*£fc*Bife£ft8 

tt3Ec«fli*4 b *8B»*i{*9 tit, w«««*7 i*is^i&<* 9 * 

10 *S£g1fi 8 ©a. -if 

b £«-^L-ceailt*6©M«£3aiSL» c+i-efi^'tSfse £ii#L-cBfc&/ 

I*. iS©S#ffli4 a IC J: lj|BftKtt9n©MtiMR4 b $«tt*CttfTf* 

##Sf?8T?l±. -t5fc©PSJlfl'*l|*#5ttM#a (The Layer Division Subset 
Difference Method) ttot, S±SI 8 ®J©^#ffl^ 4 a 9 icffi 

20 S**i£«1t«4 b ££j$-f<5 0 ftfcttlci** fcliStgi8 ic&f LT* ^©S 

*ttf *t*. colt, eattttt* 9 ©«««4 b ©«**©*»*#* a. o 
25 i±8i8i=«i$irfc<afffla4a©iiai**«ica**i*sci^ 

C©3 >-f >^Efflt5/*^.M4 % D v Dft Eto%*r4 7.1 $IBflfcttft& LtSi 
tStiffltfeU. C ^T?l*!|#l= D V D- R OM$0H::& otRWt*. C © n > 
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x»<Eific«a-r*. ««sfi#i*a >^>^<Dw±^Bg$wr-s^m (is 

fcfc. JUTOSJfi«0>SiWI=fe^"C» Encryption () fiBf^-lb 7 JU a* U X A „ 
5 Decryption () Itm^itT )l> at 'J X A £ at" CD <b f £ » Sfc. Encryption (31 
»1, 3lft2) I*3lft2 LT3lft 1 $Bg-*Ht LfcBf-^XSit L. 

Decryption (31ft 1 . 3lft2) I43lft2£tf[-^-§i<!:L,"C3lft1 S^-^Lfcf — £ 
*fc, " I " l*2OC0f ; --5»CDJig^$gL. (t 1 -^ A) I (T- 

10 (2.1) a HB»«B 

LTCDbu^cDxi' X2«3SX»fc£l=KI+ t> ft £ CD £ 0 a>^l/^ 
IB^^S5 O CO #315 CO 11 -i-S 1~S7CDWS£iI]1 OA~1 O E&tfUl 1 1 A~ 

m 1 o a ic^-r <fc □ >-x>^ic*fjs-r^ii-^s i ^mti-r^ 0 a > ^ > ^ 

tLT(4. lfcfcfc£©V>U^y x-f 7T-*a<tt*«-l?fc*J&<. - 

20 ^T*coa :/^l/^l**;h.e>l::«R£*:h.St»<DT?tt<i:< „ 3t#fc EO^r — * 4, 

ti^. 3>f >7A*gf5 1 tlttt. a >-r>yco^X$— x — £ # 

ie^$*tf=Km7 L — ^-V. DVD-R, DVD-RW. DVD-ROM, DVD 
- R A M^ifa)f5lt^**S^^aiA/-effi#S 1 &&1l-tZ>®& J t>* LAN. -f > 

25 Tfi#S 1 SttlA-r<6(slg&fc£j&<*lf 

at«AA8l5 2 Ita >f>*;tt#B©aA SA*t * y , 1! 1 O 

b \z7jz-? «t ^ i=, a >*;ataAtfe5fi^s 2 ^ai^-r^o a>^>^m 
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vgm&AJimms 3 it. 3>x>yntMA£A*i-r£gs-efc t J % en o c 

P=Decryption (Encryption (fif(Df-^ P, 3>f^ ^ Bt-^H A ) , 3 
5 >TP>^Mg|A) 

3>f>7lfjkif5 4lt a ^T 1 >^Bt#g|A (ffS3) £/B^T:3> 

g] 1 O D |C jj* £ 5 l~ . m-^S 4 = Encrypt ion (3>ir>^, =3 > > V 
A) tfe^, 

10 Z&mX'lta >T A $ffl^T=J >x >y ^S&Bf-^b LTl^ 

a >^->y g#£Bg-*Hb-r <5&mi*&-f l*>ec^„ mm*. 

^^atM^^T a ^TlsV&mmtir&i tit. =1 Is ^r^V 0>m.^it lz 

15 t^a^^v^m-i-^A^^^t-rix^a^^gfeT^^^^'y^^^-r-s 

B,5AAt§gtt'fey, NSa>flf#8B,« B 2S • • • B„_„ B N £. B55E<DPi 
■ »«*tf3MI*a©7AJ 'J XAIifiEotljRL, flT#S 5 
20 H 1 0 ElC^f cfc 5 I" . •tt-^-S 5 =m^MBi | Bf#^B 2 | • • ■ j Bff#fi| B, I • * • 
I WHS-ftB.., I Bff5-£B H -5***1-5. ^ftt>&®.<D&^MB i I- «fc 

25 ^Bf^--|b^M5 6 I*. ffi^S 5 i Ltiailx^i-SaB, ^ffll^t, IfS2t 

Ltf btl^3 >f>fHfaA £Bf-*Hb L. ^fti-^ «y y— Iff fg Header (Bf-5§- 

SB,) £#an L Til -4-s 6iLtHj*t5. B1 1 Alc^f* 5 

'«■& S 6 = 

Header (iStBB,) | Encryption ( =3 > T" > V ^#81 A , Bff9ffiB,) ) 
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| Header (B&-5&B,) | Encryption ( a l/^r > VVmf* A , Bg-S§-^B 2 ) ) 
| . . . 

| Header (Bg-^-^B ,) | Encryption (a>f >7^§iA, Bf-^SB,) 
I ■ • ■ 

5 | Header (Ba-fiB,,., | Encryption (3>f >7S?IA, iM-ftB,,-,) 

| Header (Bf-§-SlB N ) | Encryption (3>f >'VlfiA, 

|^S6 = Header <H&#8B) | Encrypt i on (a >"T > ^ tt« A , Bg-^-^B) 

-ft 3 ft fc 3 y St A (D *"&J*L-CiB««# * 

y^ttttlCtt, E««#£fi£SE«5 7 I*, fl#S 4 =Encryption ( n > ^ > ^ , 
zi >-T> 4 y8t-^^A) fl"^ S 6 = Header (Bt^-^B) | Encryption (U>T" 

A. MSB) £2®£L. **L|=1X9 — IIjE»-»*#10 Lfctco^ll 
15 fS7iLtffi*t*. cfcoT. B1 1 Blc^-T «fc 5 IC. iI^-S7li. =3>7-> 
♦:/ll&#«AT*BS#1t Lfc=i >f N^iCDBf-^^B i "CBf-^bSFftfca ^=rlsV 

S7 = Header (B£4§-fiB) I Encryption ( 3 >"T > S> A . Bf-Q-ftB) 

| Encryption (3 >^r>V, =J i/T" > 4 V Bg#g| A ) I ECC 
20 -Ci*£ft-S. fcfc, E C CliX^— fTIE£F#T?fc'5>o 

15»£*5 8I4. Sfcj**ftf=SBf*« #S 7 ZUtT* 7.0 DdlBIIL. XI*. % 

(2.2) 3 >f>7S4gf 
<75^-SPa)ii-i-(Dl^#$ HI 1 3 A~ 1 3 B&tfH) 1 4A-1 4D|:^LTU^, 
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it. 113 A|C^-T<fc 5 

S1 1 =Header (St^iB) | Encryption (n^f^^lfiA, Bt^H 8 ) 
| Encryption ( 3 1/ f > y , a > ^ > ^ Bg-i-gi A ) | ECC 
5 T-g£*l-5>. 

ffS1 1 *<DE C C ^ rrX7-fTjE5BS$H^^-i) 0 * L T . x 7— IT 
IE&0><I-*§-£il-§-S 1 2 £ 'VI 1 3 lc^-ltT-?-^t^*iM«#^S 6 4S^a> 

10 y^#3g A (D^r — £ "Cfc y . SI 2=Header (Bf-^MB) | Encryption (a>-r 
>7i^lA, Bft-3-ftB) 1 3 li n >T" >^B£#^A 

•eBt-§"(b^*tfcz3 IsW? — $ -efc y . S I 3 =Encryption (3 l/'rt/V . 

EttSltte 3 14, I£Stmt««ftO}ftf iB„ B 2 . • • - . B JS B H _, % 
15 B.tfro-N'V^ Header (B,) , Header (B 2 ) . ■ • • , Header (Bj) . • ■ • . 
Header (B,.,) . Header (B.) $i#Ltfc<itT?fe§„ &fc> Z Z TMilElS 

20 JZ^-^-^B j £IE* : 

P = Decryption (Encryption (ffI©f-9 P, Bg-^-^Bi) , tg-^-flBj) 

Header (Bt-^B,) = Header (Bf-^MBj) 
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tzmmw e 3 ii % gi 1 4 bic^-t «fc m-^-^B, i t^iB 2 1 • • ■ i «■*§■ 

IB H | «-^g|B H ZCD^v?— Header (M^B,) | Header (m^^lB 2 ) 
5 I • ' ■ I Header (M^B,,.,) | Header («-S§-gtB M ) £ tii ;*J <!» „ 

Sim-§-^S6 4 l±. 'li-^-S 1 2=Header (&#^B | Encryption ( 3 > "T > ^ 

m#^A, Bt-^-^B) t , -tt-^-s i 4 = (m-^siB, i «§ib 2 l • • • I m^m. 

B,_, I M-«B B ) — Header (m-§-®B,) | Header (M® B ,) I • • • 

| Header (IfSlBj) | • • ■ | Header (at«B H ) I Header («-5§-@B,,) * 
10 A^3t L. pt^r-f X£ Dfrt>m?l- IX ofc Header (Bg#^B,) tMS.'g.W.tf^'? 
£ Header (tt-9BBj) tf-grf 3 frfcB*. -ScT 3 B#lCli£-S§-g| B j l> T 
Encryption ( =1 >f>7t^iA, IflH^ttB,) Oi£<J. 3>tt>-/ 

tK#fi| A = Decrypt ion (Encryption (3 >f> w ;a#R A, Bt#^B,) ,ftfRB 

tats. m&(D&?\~izfe%iW:6 3\zm^MB s *<Dt,o>x*\tti: < . 
?&<Diz&mte = ?*)i'mmtffti*ztix^z>m'£i** it?gt6 4^7^;^ 

=J ^f^^I^SIS 5 li. 114 A ir *f If S 1 3 = Encrypt ion ( 3 > T" 
> >y , n^T-^^Bf-^-SiA) 0 1 4 ClCitf^S 1 5 = Decrypt i on 

(Encryption (□>f^7gfiA, flffMB,) . m#^Bj) =3>^>^m# 
25 H A £ A^J <t L , -tl-^-S 1 5 ^m^Tlf^S 1 3 L. *-<D$Sm. Decryption 

(Encryption ( 3 > T" > ^ , a > T > «y flf^fil A ) . 3>T^'^fSA) = =J 
>^>^$^l-§-S 1 6tLta*t5. Ii^t6 6 1*3 >f>7l§gl6 5 
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(2.3) =i >T>vtzm9B:m 
5 *a«-r* ut^sd. commit. a*si*«Mttni=«fc y frfrjtsa*. 

o t, L ft I** 5 ft *^<D ^i'l^ft5I^5IIRt5 

10 Uf l ^S2) , 

|cM^-<i>^T<D^#^B j £ s P=Decryption (Encryption (•ff^fl)-7 i — £ P , Be 
§IB,) . iflBj) *»fc-ril&#«B, ^ffl^TBt-^ftLs Encryption ( > 

f >-yi§iA, Bg#siB,) (xf"^s3) , ant. zomm^m^ 

xf y 3 -eMiR£*tfe=i >-r >^Bt#M A £8H^T =1 > ^ > '7 £ B£ 
-i-'ltL. Encryption ( =1 1/ tF- > ^ , 3 > t- > ^ Rf-^-gl A ) (Xt^^S 

4) o zommiz. a*. ««aM#fir5. 

Xt- *y 3 &tfS 4 bftfc Encryption ( 3 > -r > V A . 

20 Bf-5-ftB,) Encryption (3 ^>=r\sV, 3 >T > ^ Be A ) CxtLTI^- 

ITaEft-^£ftan-r £ (Xt^^S5) 0 CKDMSfi. tf$Bi£it#T-fc£>#fE4i#. 
T<f X?§!i3£Xi#ft£T?«T:b;h.£o 

f L-t, Xt*V"7S3. S 4 StfS 5 VttUZtitz Encryption ( 3 > T > ^ ^ 
#^A, Rf-3-aB,) auf Encryption (3 >t>^. ^ >r>7S|-§MA) 3£tMc 
25 X^-HdE^^T^ X? DlrI5tfr-5 (XT«i»^S6) o CKDMttTV X 

•yatffott^aoitatfjftf-f x<? d i=sBS$ns, 

S. Ltlft?B1"5o HI 1 6 li. m 1 5 ir fcl-f -SXt- v zfs 2 <7)flm. 1D*>. S££ 
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IbLfci* (*?±£i*i>J Lfci*) l?£=gSa>#£Lfci,*2#*i::oi*T. -to^u— 

10 3fel=, 2#*fr#£-r.i>fr : §fr£¥iJS"r<£> (*-t??S 2 2) o 

&St;8:l£<Dnft*T h £ 1 OMUL ST h (R) £liJ&-f£> (^f'^S23) o 

::t% sT t (R) T h <zuu- h <t Mfc 'J £fSS^5S/*x±£> 

U fr o fc ± T 05 2 fr t o T 1*5 . 

S T h ( R_) 2 OCDM-lb 'J-7v„ Vj5. * ft t> <£> *il J — K v 

J^TlcftilCDliSiaHb 'J — ?tf#£E LfcUJ: 5 5 (X J r^3* , S2 4) 0 

— K<D + -t?&$$Hb 'J — ^irOSiUfr^/httt-i)^— h'fflCi v <7) 2 

±l:?ISt-5T^ - K$v,itl), (St&fl: 'J-7i?ST h (R) *ic 1 o Lfr# 

£Lfcl*i§^. v,= Vj . v = v,= v k H. vl±ST„ (R.) <D)\>- hi^fot^ 
25 -So 

Sfcir. v v k fce»li, «55-*^s k .,l=«iy itb^fc^i^B,© 1 oi: L 

xji^-r^ (xf^s25) o mm\z. v,* Vj m^h^s,.; i=fijy 
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y-Kv«fcyTic&§^s^#*T h *<&y-K££TRfc*L, v£&ai 

<{b U — 7 £ -T -5 (Xf^S26) „ Jfelz* ST h (_R) ft<D JU- h 7 — K*«*» 

5 ftU-^tfe^^^Jli^l (xf y^s27) o h y — Krf>*SS2*Hb y — 

lix^-v^s 2 3lcM l J s h/ — Kumictssanb 'J— :7$^*?te(DS|i#*T h 
10 ^^^^fs 2 7-es T h (r.) i*3<d;u- — Ktf&s&ifc u — ^-e^ 

LT, KJUttK&aHb y-7£^frteO>Bli»*T h ;!>*£T<D 2# 

**|C#3E < £ (Xf f^S 2 8 ; No) . M lift 7 "T o * =3 >T" 

15 ^^m-^^AroBt-^^blCffiLx^tt-SBt^-SlB, (Dm^li. X^r^^S 2 1 S^Xf 

(2.4) =] 

ft^r-f *<? D^^3 >t- > *y S ± Mlcou Tift 0/3 -So 81714a 

20 -v ^JEct*©KW3SS6 1 lc<fc y ffi»fll«*«R*Bt (X^'>^S3 1) , X. 
iz > X^«i/^S 3 1 vme>*itzm-%iz*i UTX7-!IiEgt6 2lCcfcy x^-rr 

(Xf'^S32) . 
3"fc^-f Dcj3|cI5^*^Tt^-i> (7)^^ ^"—Header (Bg-^B,) 05 

li^i^itt 'BMKDgflB j ro's-v ^—Header (I^iBj) 

25 < 1 Oli-St-T 5 t©A<#S-T <£>^5fr£IJ3'<& (Xf 7^S33) o 

7 s >f X-i7 D«iJ©^'y — Header (Bg-^StB,) C:>tf IE £> Encrypt ion 

m#^A, Bt-^-^B,) W£SE1H!I<D^ 3" — Header (m#^Bj) !rxtfj£-f £> 

S?lBjtS^tS(^f •yT'S 3 4)oO* y >-r A = Decrypt ion 



v 
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(Encryption (3 >^ A . Bt#iB,) , m^BB s ) t I* 5 «B3£fTl^ 

DiCDBf-^-'Iba >ir>y-efc<5 Encryption ( n > T" > ^ , 3>f >78g-§iA) 
5 ^^-^--^-S (X-r-y^S3 5) „ O £ y s :> y = Decrypt ion (Encryption 

( n > > y , a>f>*;iSflA) . n >-f- >7l§iA) £: 5*&«£tTl^ 
a ^ >y<D^-*§-£fr-5 0 fit, m*w2ft>tz=i £H±-f -5 (XtvZ? 

S 3 6 ) o 

10 3 3 ; No) . ^(DS£^SlCj:5W±j!>*frW£*l.T (.tgl^C <t |C & tj . a>f> 
(2.5) £&J|(£'s<DB&4§-ffi0)*!iy ^Tf=gittaft*«**t6ffl-#-*«* 

15 h*#Bsur»wr*. 

y asr&*iT^*y- k (y-7) r*i^^*^^o f lt. ftsrostf^* t„ £51 

20 iRL (Xf 7^S43) , MfcZtltztttt* T„*fl)fft(0</ — K v , — h t ~t 

SfclC.X^y^S 4 4T*^$R£:KfcSP#* T„.,<7>;U- h/- KlC«y St btt*: 
LABEL, Ut f 4 2 T'flJ y ST b*lT ) Sffl^t, 
(«#) &L,..£ffly St £ (7.^-V^S 4 5) „ ::t, * T h> , 
25 ^©fft©/-Kv,$it„ (lL.T hil fl)^-hy-Kv,ttB<) . 

^^(Dut^- («■*) acoay ari*JUTa>d:5i=fT5. 
teafticaftiaft^BaSGa)^**^^^ label,, .t Ltztz. *<D&±*zmft 

Lf=£«fiP«"*G L (LABEL,.,) „ G. (LABEL,..) , £ G, (LABEL,..) 
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G L (LABEL,..) A*^^ULABEL,.,<Dfyy MST^ftfc^— K<D£$JCD^y 

G M (LABEL,.,) A*^'<;ULABEL l .,(DilJlJSTt»+Lf=>'— KlCfljy ^Ti> 

5 G R (LABEL,,) A * V ^JU LABEL,. ,fl)#J 9 S X 6 *tfc -/ — K0>«ff®?- ^ 

— ki=w y at^7^jb 

S|i#*T h .,<D)U— h/~ Kl=»y St&^lfe?^^ LABEL,^t»^<D2 0a>^-y 

io * T h> , *<©£-ca>/ - Kic9-<;u$im ats^ti^ts. 

fi&lr. T h ., + — KlcSjy S5T 6*ifc7*JU LABEL,. ,£ A* «h It 

L, ,= G„ (LABEL,.,) fctUM" <£> . C (7) S_,.,lcfl] y ^ T & *L £ «# (« 

#) ItfcS. 

^(C, X^-y^S 4 3 -eiHR£*tfcSli#* T h *(DSB#* T h ., T». X^'y^S4 
15 4 XM1R2 *T.Tl^L^«»**<?f«-r SfrSfrSSIS* £ (^t-^S46) o 
#e-Ti.ii^liX^r^ 4 4aHJ ^ffg^Sft-Cl^^SBtf* T h>1 *iB« L, 

T h a)*T'. x^r^^s 4 3 T?;i}R£;ix-c^&t^:B-* T h *<#£-*-SfrSfr 
20 s^£*ltu£i^#* T h £3t#iL. mmommzfr -ar. 

flj £ ft Lt The Subset Difference Method &<DX . IS ft 

&tz. The Subset Difference Method |CjJl>T, Q&itiMn^OllM.^ (Ba#) 

i»«fr&«#8£#tf>aa>i=«* io g2 (n) +iiai© (&<&a»£/ss<0U3** 

^«>StU?) ilt^^: Lt^f:A«, *;£5£-eiim*: d + 1 Is] + £ « 
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as i= m z c <t a< pt^ t & a o 
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it <r> m m 

1 . m&<D&m&mm£ i )-7\~my *kxtz*m&&mz-tz^&£* 

2. mzmmmomv ^xz-tfo^m*. 

15 is M # m * <*> # * i c « if $ «g y ^ r « ¥ is t . 
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Hi OA «^ S1 



1* ■ "T j\\ 



Is "J 



(Hi OB <I^S2 



mioc «^S3 



HlOD a«s4 



11 OE 



Bg^S|B h 
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1 1A 



(Header Bg^^B,) 


(Encryption ^^VW&J\. Bg-^B,) 


"(Header Bg-^B.,) 


(Encryption urs-rl/'.yMfiA. Bf-§-£B„) 


■ 
■ 


(Header Bf-^B^,) 


(Encryption a>^>>y^^A. Bt^-^B^,) 


(Header Bg^-@B N ) 


(Encryption ar/T-I/^MttA. Bg-^B N ) 



1 1 B 

1S#S7 



(Header Bf-^B,) 


(Encryption ai'T^yM^A, Bf#^B,) 


(Header Bf^MB 2 ) 


X>>7"J^>3> 
(Encryption =3^>^^^A, Bt#^Bj 


• 
■ 


(Header Bf ^B^.,) 


X>-j7iJ^V3> 
(Encryption 3>^>>yg-^-g|A. B§#@B N ,) 


— 

(Header Bf ^i|B N ) 


xx?'j3^>a> 

(Encryption n>-x>>7^g-^@ A , Bg-^BJ 


X>^iJ^>g> (Encryption a>-r>»;/, 3^-t-^'VBb-^-^A) 



l7-aU*T-f>y3- K (Error Correcting Code) 
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Ell 3A 



(Header Bf MB,) 


(Encryption =]>T->^^#^A. Bf^B,) 


— 

(Header Bf MB 2 ) 


X>£'J^>3> 
(Encryption 3>X>^-§-glA. Bf MB 2 ) 



1 1 



(Header BHWB^) 


(Encryption n>^>^#^A. Bf fiB^,) 


(Header Bf#^B N ) 


(Encryption r3>^>^g-^^A. Bf-^BJ 


Xr/<7IJ^V*3> (Encryption I3>t->*;/, 3>7->*:/Bf -^UlA) 


x ^ — ^U^X-Oy 3 — K (Error Correcting Code) 



13B 



«-^S12 < 



(Header Bt^SB,) 


(Encryption ZI^^^^^A. B§#«B,> 


(Header flf^-^B 2 ) 


(Encryption Zj>-x>^^-^g|A. Bt^igB,,) 



(Header Bf-^MB N .,) 


(Encryption SI/T-^Vtt^jSA. Bf#@B N _,) 


(Header Bf#§|B N ) 


XX7'j3fva> 
(Encryption a^T^y&^&A. Bf ^B N ) 
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11 4A 



<f-§-S13 



(Encryption =3> 



r 



14B 



fl#S14< 



v. 



(Header OT^B,) 




(Header H^-fiB,) 




■ 
■ 


(Header g^lB M .,) 


OT^B M ., 


/S>, V'5^ — 
(Header S#@B M ) 
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S3 



S4 



S5 



S6 
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11 6 


^ (X^<V^S2) J 













N 



S23 



S24 



S25 



S26 




S22 



st„(b)**i* 



ST h (R)£tJ0> 
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17 








ism 


ma 
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